$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer File: AF709D487025EB90C014C7186CC0AEA341A27C3B.cer (raw, json) Hash identifier: ZrmNQ4hZrofXU70x7TFVSzOXJjSPYix0l0mHLUqoXII= Subject key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E8AA5E87C0570596AAFB8E04EE3298569C23A53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft caRepository: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 17:46:11 +0000 Certificate not after: Mon 21 Sep 2026 17:51:11 +0000 Subordinate resources: AS: 270737 IP: 177.221.136.0/22 IP: 2804:709c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8a:a5:e8:7c:05:70:59:6a:af:b8:e0:4e:e3:29:85:69:c2:3a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 17:46:11 2025 GMT Not After : Sep 21 17:51:11 2026 GMT Subject: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:a9:b7:a2:13:b2:64:6b:74:b2:92:95:92: a9:a8:8f:19:ff:c1:0c:03:5b:32:bc:bf:e8:14:e7: 39:94:d0:c5:81:dc:65:2f:a8:18:e8:af:51:59:fd: db:81:6c:c6:7b:dd:38:ac:d4:6e:85:5f:c6:6e:76: 96:4a:75:da:f7:40:6f:ea:ff:dd:7b:34:6c:b6:b1: e5:75:27:20:86:c8:38:5f:0b:db:ed:6d:7a:08:f8: a2:5d:6d:da:68:04:05:f5:7f:95:f1:c4:47:b1:d5: e1:56:21:38:bd:01:9e:b0:6d:f6:e6:9d:63:94:b9: ca:36:8b:7f:29:b3:10:33:35:2f:f1:36:a8:31:6b: 5c:c7:0d:0b:c2:2a:e7:05:1d:51:cf:5a:46:86:52: 3a:e4:56:12:d2:0e:91:72:97:bb:8d:db:f1:96:a5: f5:a0:15:d6:f6:a8:f3:d1:0f:b4:2f:fa:9a:20:db: b7:09:c9:06:b5:43:78:87:5f:49:4d:3f:ff:d1:c4: 01:f0:3a:11:58:a3:9b:93:c1:50:7f:16:94:54:03: 0a:fe:ab:1b:ea:ee:47:a1:4f:ee:68:f0:2e:ab:29: c7:ef:9d:9a:b1:a4:02:9c:01:8d:92:8f:be:76:45: 9d:90:2e:39:3c:b0:62:8a:7a:3e:04:a2:c8:e6:b0: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.221.136.0/22 IPv6: 2804:709c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270737 Signature Algorithm: sha256WithRSAEncryption ae:bc:cc:26:31:fc:7a:6e:c6:e8:1d:15:e6:44:0f:17:35:c4: 62:0e:19:19:94:98:89:cf:48:7a:e0:92:f6:a1:2a:9e:88:f9: d1:d5:9a:5a:dd:7a:86:e5:24:6a:9d:bd:78:8e:02:bf:20:7d: a8:b0:b9:c8:9a:34:7f:52:b2:59:5a:8d:74:79:fb:b1:ea:17: 4f:06:af:99:e1:a9:b9:b6:c9:53:be:75:9f:21:db:72:91:25: b5:b8:0a:e0:60:02:3a:8b:d1:5d:a6:0d:b9:20:9e:83:89:c8: 69:9c:8e:b7:d2:ad:a2:71:ee:d2:a8:60:e4:10:b8:34:09:5e: a6:55:62:51:aa:91:2e:ae:b5:82:cb:00:de:29:7b:1e:e0:1f: 4f:f5:38:98:2f:c9:94:6a:b2:83:56:55:ac:ae:46:e9:37:b5: 30:2c:89:40:8f:e1:71:2a:56:86:33:3b:81:5b:f0:21:3b:b8: 32:dc:32:c6:4b:3a:c0:a5:12:92:37:19:b5:63:9c:93:dc:0f: fb:44:68:87:35:e9:bc:9a:b8:86:71:ec:f3:91:02:a1:f4:db: 88:8c:0f:a0:b5:91:89:c8:78:ea:5f:4a:3b:e1:8c:b3:67:4a: ec:98:cb:2f:0e:7a:c8:9e:8e:d3:a5:40:7c:77:a0:fd:3c:ba: 96:44:3c:4a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfoql6HwFcFlqr7jgTuMphWnCOlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjIxNzQ2MTFaFw0yNjA5MjExNzUxMTFaMDMxMTAvBgNV BAMTKEFGNzA5RDQ4NzAyNUVCOTBDMDE0QzcxODZDQzBBRUEzNDFBMjdDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVam3ohOyZGt0spKVkqmojxn/ wQwDWzK8v+gU5zmU0MWB3GUvqBjor1FZ/duBbMZ73Tis1G6FX8ZudpZKddr3QG/q /917NGy2seV1JyCGyDhfC9vtbXoI+KJdbdpoBAX1f5XxxEex1eFWITi9AZ6wbfbm nWOUuco2i38psxAzNS/xNqgxa1zHDQvCKucFHVHPWkaGUjrkVhLSDpFyl7uN2/GW pfWgFdb2qPPRD7Qv+pog27cJyQa1Q3iHX0lNP//RxAHwOhFYo5uTwVB/FpRUAwr+ qxvq7kehT+5o8C6rKcfvnZqxpAKcAY2Sj752RZ2QLjk8sGKKej4EosjmsKVFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvcJ1IcCXrkMAU xxhswK6jQaJ8OzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG9L RGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRv S0RqVHR1VmZSeHliUUVDWmZNUm92NVo2RHByeUY3TXlRTjE3djJzWktrLzAvQUY3 MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0MUEyN0MzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsd2IMA0EAgACMAcDBQAoBHCcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhkTANBgkqhkiG9w0BAQsFAAOCAQEArrzMJjH8em7G6B0V 5kQPFzXEYg4ZGZSYic9IeuCS9qEqnoj50dWaWt16huUkap29eI4CvyB9qLC5yJo0 f1KyWVqNdHn7seoXTwavmeGpubbJU751nyHbcpEltbgK4GACOovRXaYNuSCeg4nI aZyOt9KtonHu0qhg5BC4NAleplViUaqRLq61gssA3il7HuAfT/U4mC/JlGqyg1ZV rK5G6Te1MCyJQI/hcSpWhjM7gVvwITu4Mtwyxks6wKUSkjcZtWOck9wP+0RohzXp vJq4hnHs85ECofTbiIwPoLWRich46l9KO+GMs2dK7JjLLw56yJ6O06VAfHeg/Ty6 lkQ8Sg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:48 2025 by rpki-client